Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Found Bloodhound.w32.EP, failed to remove [RESOLVED]

paper

Posted 24 July 2005 - 02:45 PM

paper

Member

Member

48 posts

Hi,

My first time come here to ask help.

After fail to remove the evil viruses, I have just installed Norton Antivirus to fight with them. I have turned System restor to Off, disconnected with internet. In safe mode, I scan C: by Norton and it found wininet.dll with its name Bloodhound.w32.EP and said Repair failed. I then click the Quarantine button but it said Quarantine failed.
Restarted the window as normal mode and found Norton's Auto-protect is OFF, I tried to turn that to ON but it said Norton Antivirus has encountered an internal program error.... I then connected PC to internet and start to update Norton but PC was crashed!!
(It looks Norton can find something but was beat by the virus ?)

I know I also got
Access Members Area.exe short cut icon appears in desktop. don't know how to remove it, I just delete the short cut icon and don't know if the .exe is removed by other removers or not.
Shopping Wizard and Offer Optimizer in Add or Remove Programs window. If try to remove them, I will be linked to their site and asked to download an uninstall file. But the uninstall file cannot uninstall them!
And perhaps more.....

Advertisements

Trevuren

Posted 24 July 2005 - 02:51 PM

1. If you haven't logged in go to Geeks to Go and do so. Then proceed to item a.

If you already have logged in, go directly to item a.

a. Click on My Controls at the top right hand corner of the window. b. In the left hand column, click "View Topics" c. If you click on the title of your post, you will be taken there

2. Also, while at the My Controls page, check the box to the right of your post and then scroll down. .Where it says "unsubscribe" click the pull-down menu and select "immediate email notification"

3. Please TURN your SYSTEM RESTORE back on. We need backup in case of an emergency. Malware Fighting # 101

4. Please DELETE your current HJT program from its present location.

5. Download and run the following HijackThis autoinstall program from Here HJT needs to be in its own folder so that the program itself isn't deleted by accident. Having the backups could be VITAL to restoring your system if something went wrong in the FIX process!

A. Close ALL windows except HJT

B. SCAN with HJT and SAVE LOG. (a notepad window will open with the log in it when you click Save Log) (Ctrl-A to'select all', Ctrl-C to 'copy')

C. POST the log in this thread using 'Add Reply' (Ctrl-V to 'paste')

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS MOST OF THE FILES ARE LEGIT AND VITAL TO THE FUNCTION OF YOUR COMPUTER

Trevuren

Posted 24 July 2005 - 03:40 PM

Trevuren

Old Dog

Retired Staff

18,699 posts

The first thing to do:

*We can definitely help you, but first you need to help us. The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time. DO NOT UPGRADE TO SP2 AT THIS TIME

Scroll down until you find the service.===>Service:SmartFinder Uninstall

Click once on the service to highlight it.

Click Stop

Right-Click on the service.

Click on 'Properties'

Select the 'General' tab

Click the Arrow-down tab on the right-hand side on the 'Start-up Type' box

From the drop-down menu, click on 'Disabled'

Click the 'Apply' tab, then click 'OK'

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

First we need to make all files and folders VISIBLE:

Go to start>control panel>folder options>view (tab)

Choose to "show hidden files and folders,"

Uncheck the "hide protected operating system files" and the "hide extensions for know file types" boxes.

Advertisements

paper

Posted 25 July 2005 - 11:12 PM

paper

Member

Topic Starter

Member

48 posts

Hi Trevuren,

Great, HijackThis passed....

I was checking the PC and found some problems (or not being problems):

1. Offer Optimizer and Shopping Wizard still in Add or Remove Programs window.
2. Need to reinstall Norton? It is not in the bottom bar and Excel said 'Some Norton Anrivirus components are missing'. (I haven't desided which one is better, Norton or Avast)
3. Cannot open Ad-Aware, it said 'The application failed to initialize properly...'
4. Most important, cannot link to interet, for example, cannot oppen www.google.com

Trevuren

Posted 25 July 2005 - 11:28 PM

2. Provide me with the full path of both programs and I will instruct you on how to do it without re-activating the infection.

C:\Program Files\.....

3. If you are going to NOT re-install Norton, I personnaly like Kaspersky. It is only an anti-virus, not a suite, but it is the workhorse of the AVs. NOD32 is a bit lighter in resources and also excellent. Zone Alarm Free is an excellent firewall. That is what I use.

4. UNINSTALL Ad-Aware and download and install, a new one. Don't forget to update the signatures and configure it as per the instructions in my signature pane at the bottom of the reply.